
United States Patent and Trademark Office 



UNITED STATES DEPARTMENT OF COMMERCE 
United States Patent and Trademark Office 

Address: COMMISSIONER FOR PATENTS 
P.O.Box 1450 

Alexandria, Virginia 22313-1450 
www.uspto.gov 



APPLICATION NO. 



FILING DATE 



FIRST NAMED INVENTOR 



ATTORNEY DOCKET NO. 



CONFIRMATION NO. 



09/405,242 



09/24/1999 



20583 7590 1 1/06/2003 

PENNIE AND EDMONDS 

1 155 AVENUE OF THE AMERICAS 

NEW YORK, NY 100362711 



JOSEPH SILVESTER 



9740-009-999 



9272 



EXAMINER 



MAHMOUDI, HASSAN 



ART UNIT 



PAPER NUMBER 



2175 

DATE MAILED: U/06/2003 



5 



Please find below and/or attached an Office communication concerning this application or proceeding. 



PTO-90C (Rev. 10/03) 



Office Action Summary 



Application No. 

09/405,242 



Examiner 

Tony Mahmoudi 



Applicant(s) 

SILVESTER ETAL 



Art Unit 

2175 



The MAILING DATE of this communication appears on the cover sheet with the correspondence address 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)D Responsive to communication(s) filed on . 

2a)D This action is FINAL. 2b)S This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 
Disposition of Claims 

4) ^ Claim(s). 1-25 is/are pending in the application. 

4a) Of the.above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) S Claim(s) 1-22 is/are rejected. 

7) S Claim(s) 23-25 is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) Q The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 

11) D The proposed drawing correction filed on is: a)D approved b)D disapproved by the Examiner. 

If approved, corrected drawings are required in reply to this Office action. 

12) D The oath or declaration is objected to by the Examiner. 
Priority under 35 U.S.C. §§119 and 120 

13) S Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a)DAII b)D Some*c)KI None of: 

1 .[3 Certified copies of the priority documents have been received. 

2.D Certified copies of the priority documents have been received in Application No. . 



3.D Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

14) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 119(e) (to a provisional application). 

a) D The translation of the foreign language provisional application has been received. v < 7^(\>Jh/^ 

1 5) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 1 20 and/or 121. D0V POPOVIu 
Attachment(s) SUPERVISORY PATENT EXAMINER 

1 ) |3 Notice of References Cited (PTO-892) 4) □ Interview Summary (PT0^1^Pape9ko^ CENT ER 21 00 

2) ED Notice of Draftsperson's Patent Drawing Review (PTO-948) 5) Q Notice of Informal Patent Application (PTO-152) 

3) ^ Information Disclosure Statement(s) (PTO-1449) Paper No(s) 2 . 6) Q Other: 



U.S. Patent and Trademark Office 

PTOL-326 (Rev. 04-01) 



Office Action Summary 



Part of Paper No. 3 



Application/Control Number: 09/405,242 
Art Unit: 2175 



Page 2 



DETAILED ACTION 

Claim Rejections - 35 USC §103 

L The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 1-5, 14-18 are rejected under 35 U.S.C. 103(a) as being unpatentable over Bjorn 
(U.S. Patent No. 6,035,398) and in view of Beatson et al (U.S. Patent No. 5,892,824). 

As to claim 1, Bjorn teaches a method for the separate authentication of a template and of 
user data inserted therein, comprising the steps of 

a) providing the template, the template having a corresponding template ED and template 
Document Authentication Code, hereinafter referred to as DAC(t), linked thereto (see 
column 8, lines 62-65, where "DAC(t) H is read on "public key"); 

b) inserting the user data in the template (see column 4, lines 21-24); 

c) extracting the user data from the template (see column 3, line 66, column 4, line 1, 
where "user data" is read on "fingerprint features"); and 

d) generating a user data Document Authentication Code, hereinafter referred to as 
DAC(d), based on the user data (see column 4, lines 25-30, where "DAC(d) is read on 
"cryptographic key"); and 
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Bjorn does not teach storing the template ID, DAC(t), the user data and DAC(d) in an 
Approval Data Packet, hereinafter referred to as ADP. 

Beatson et al teaches storing the template ID, D AC(t), the user data and DAC(d) in an 
Approval Data Packet, hereinafter referred to as ADP (see column 14, lines 18-21). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Bjorn to include storing the template ED, 
DAC(t), the user data and DAC(d) in an Approval Data Packet, hereinafter referred to as 
ADP. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Bjorn by the teaching of Beatson et al because by 
including the storing the template ID, DAC(t), the user data and DAC(d) in an Approval Data 
Packet, hereinafter referred to as ADP, would facilitate the retrieval of these elements for 
post processing. 

As to claim 2, Bjorn as modified teaches wherein step a) comprises the substeps of 

i) generating the template (see Bjorn, column 3, lines 42-44) ; 

ii) creating the template ID (It is inherent that for every template, there is an 
template identification associates with it); 

iii) creating DAC(t) (see Bjorn , column 1, lines 54-55, where "DAC(t)" is 
read on "digital certificate"); 

Bjorn as modified does not teach and iv) storing the template ID and 
DAC(t) in a location linked to the template. 
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Beatson et al teaches (see column 22, lines 15-20) and storing the template 
ED and DAC(t) in a location linked to the template (see column 14, lines 18-21, where 
"DAC(t)" is read on "template authentication code"). 

Therefore, it would have been obvious to a person having ordinary skill in 
the art at the time the invention was made to have modified Bjorn as modified to include 
storing the template ED and DAC(t) in a location linked to the template. 

It would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to have modified Bjorn as modified, by the teaching of 
Beatson et al because by including storing the template ED and DAC(t) in a location 
linked to the template, would facilitate the retrieval of DAC(t) for post processing. 

As to claim 3, Bjorn as modified teaches wherein substep a) Hi) comprises generating 
DAC(t) from a one-way hash function (see Bjorn , column 3, lines 44-45). 

As to claim 4, Bjorn as modified teaches wherein, in substep a) iv), the location linked to the 
template is inside the template (see Bjorn , column 4, lines 48-51). 

As to claim 5, Bjorn as modified teaches wherein, in substep a) iv), the location linked to the 
template is a linked storage system (see Bjorn , column 6, lines 62-65, where "linked storage 
system" is read on "database"). 
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As to claim 14, Bjorn teaches a method for the separate authentication of a template and of 
user data inserted therein, comprising the steps of: 

a) providing the template, said template having a corresponding template ID and template 
Document Authentication Code, hereinafter referred to as DAC(t), linked thereto; 

b) inserting the user data in the template (see column 4, lines 21-24); 

c) generating a complete Document Authentication Code, hereinafter referred to as DAC(c), 
based on the template with the user data therein (see column 4, lines 21-28" where "complete 
document" is read on "template includes all of the identifying features" and "DAC(c)" is read on 
"cryptographic key"); 

d) extracting the user data from the template (see column 3, line 66, column 4, line 
1, where "user data" is read on "fingerprint features"); 

e) generating a user data Document Authentication Code, hereinafter referred to as 
DAC(d), based on the user data (see column 4, lines 25-30, where "DAC(d)" is read on 
"cryptographic key"); 

Bjorn does not teach: 

f) storing the template ID, DAC(t), the user data, DAC(c) and DAC(d) in an Approval 
Data Packet, hereinafter referred to as ADP. 

Beatson et al teaches: 
, f) storing the template ID, DAC(t), the user data, DAC(c) and DAC(d) in an 

Approval Data Packet, hereinafter referred to as ADP (see column 14, lines 16-30; and 
see Fig. 6). 
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Therefore, it would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Bjorn, to include storing the template ID, DAC(t), the 
user data, DAC(c) and DAC(d) in an Approval Data Packet, hereinafter referred to as ADP. 
It would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Bjorn . by the teaching of Beatson et 
al because by including storing the template ED, DAC(t), the user data, DAC(c) and 
DAC(d) in an Approval Data Packet, hereinafter referred to as ADP, would facilitate the 
retrieval of these elements for post processing. 

As to claim 15, Bjorn as modified teaches, wherein step a) comprises the substeps of 

i) generating the template (see Bjorn , column 3, lines 42-44); 

ii) creating the template ID (It is inherent that for every template, there is an 
template identification associated with it); 

iii) creating DAC(t) (see Bjorn , column 1, lines 54-55,. where "DAC(t)" is 
read on "digital certificate"); 

Bjorn as modified does not teach: 

iv) storing the template ED and DAC(t) in a location linked to the template. 
Beatson et al t eache s : 

iii) creating DAC(t) (see column 22, lines 15-20); and 

iv) storing the template ID and DAC(t) in a location linked to the template 

(see column 14, lines 18-21, where "DAC(t)" is read on "template authentication code"). 
Therefore, it would have been obvious to a person having ordinary skill in the art at 
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the time the invention was made to have modified Bjorn as modified, to include the 
creating of DAC(t) and storing the template ID and DAC(t) in a location linked to the 
template. 

It would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Bjorn as modified, by the teaching of Beat son et 
al because by including the creation of DAC(t), would prevent the tampering of the 
template by external sources and by including storing the template ID and DAC(t) in a 
location linked to the template, would facilitate the retrieval of DAC(t) for post 
processing. 

As to claim 16, Bjorn as modified teaches wherein substep a) iii) comprises generating 
DAC(t) from a one-way hash function (see Bjorn , column 3, lines 44-45). 

As to claim 17, Bjorn as modified teaches wherein, in substep a) iv), the location linked to 
the template is inside the template (see Bjorn . column 4, lines 48-5 1). 

As to claim 18, Bjorn as modified teaches, wherein, in substep a) iv), the location linked to 
the template is a linked storage system (see Bjorn, column 6, lines 62-65, where "linked storage 
system" is read on "database"). 
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3. Claims 6 and 19 are rejected under 35 U.S.C. 103(a) as being unpatentable over Bjorn (U. S. 
Patent No. 6,035,398) in view of Beatson et al (U. S. Patent No. 5,892,824) as applied to 
claims 1-5, 14-18 above, and further in view of Weiss et al (U.S. Patent No. 6,071,190). 
As to claim 6, Bjorn as modified does not teach wherein step e) further comprises encrypting 

the ADP. 

Weiss et al teaches wherein step e) further comprises encrypting the ADP (see column 14, 
lines 1-3). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Bjorn as modified, to include the step of encrypting the 
ADP. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Bjorn as modified, by the teaching of Weiss et al because 
by include the step of encrypting the ADP, would further secure the ADP from being tampered. 

As to claim 19, Bjorn as modified does not teach wherein step 0 further comprises encrypting 
the ADP. 

Weiss et al teaches wherein step f) further comprises encrypting the ADP (see column 14, 
lines 1-3). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Bjorn as modified, to include the step of encrypting the 
ADP. 
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It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Bjorn as modified, by the teaching of Weiss et al because 
by include the step of encrypting the ADP, would further secure the ADP from being tampered. 

4. Claims 7, 20 and 22 are rejected under 35 U.S. C. 103 (a) as being unpatentable over Bjorn 
(U.S. Patent No. 6,035,398) in view of Beatson et al (U.S. Patent No. 5,892,824), as applied 
to claims 1-5, 14-18 above, and further in view of Douglis et al (U.S. Patent No. 6,021,426). 
As to claims 7 and 20, Bjorn as modified does not teach an additional step f) of 
reconstructing an authenticated complete document, the complete document including the 
template and the user data. 

Douglis et al teaches an additional step f) of reconstructing an authenticated complete 
document, the complete document including the template and the user data (see column 2, lines 
36-51, where "complete document" is read on "a complete and updated resource; column 3, lines 
46-50; and column 6, lines 22-24, where "template" is read on "static portion" and "user data" is 
read on "dynamic portion"). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Bjorn as modified, to include the step of reconstructing 
an authenticated complete document, the complete document including the template and the user 



It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Bjorn as modified, by the teaching of Douglis et ah 
because by including the step of reconstructing an authenticated complete document, the 



data. 
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complete document including the template and the user data, would verified that the user data is 
correctly corresponded with the template. 

As to claim 22, Bjorn as modified teaches, wherein step g) comprises the substeps of 

i) retrieving the template ID, the user data and DAC(c) from the ADP; 

ii) opening the template corresponding to the template ED; 

iii) inserting the user data in the template (see Bjorn , column 4, lines 21-24, by creating the 
template for the user, the template is opened, and it is inherent that there is an template 
identification associates with a template); 

iv) generating for the template with the user data therein a new complete Document 
Authentication Code, hereinafter referred to as DAC(nc); (see Bjorn , column 8, lines 62-65, 
where "new template Document Authentication Code" is read on "public key" and "template" is 
read on fingerprint template"); 

v) comparing DAC(nc) with DAC(c), and proceeding only if DAC(nc) is equal to DAC(c) 
(see Bjorn, column 9, lines 20-30, where "DAC(t)" is read on "finger print received from the 
user"). 

5. Claim 8 is rejected under 35 U.S.C. 103(a) as being unpatentable over Bjorn (U.S. Patent No. 
6,035,398) in view of Beatson etal (U.S. Patent No. 5,892,824) and further in view of 
Douglis et al (U.S. Patent No. 6,021,426), as applied to claims 7, 20, and 22 above, and still 
further in view of Squilla et al (U.S. Patent No. 5,898,779). 

As to claim 8, Bjorn as modified teaches wherein step f) comprises the substeps to of 
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i) retrieving the template ED and DAC(t) from the ADP; 

ii) opening the template corresponding to the template ID; 

iii) generating for the template a new template Document Authentication Code, hereinafter 
referred to as DAC(nt) (see Bjorn . column 8, lines 62-65, where "new template Document 
Authentication Code" is read on "public key" and "template" is read on "fingerprint template"); 

iv) comparing DAC(nt) with DAC(t), and proceeding only if DAC(nt) is equal to DAC(t) 
(see Bjorn, column 9, lines 20-30, where "DAC(t)" is read on "fingerprint received from the 



viii) inserting the user data in the template (see Bjorn , column 4, lines 21-24); 
Bjorn as modified does not teach: 

v) retrieving the user data and DAC(d) from the ADP; 

vi) generating for the user data a new user data Document Authentication Code, hereinafter 
referred to as DAC(nd); 

vii) comparing DAC(nd) with DAC(d), and proceeding only if DAC(nd) is equal to DAC(d). 
Squilla et al teaches : 

v) retrieving the user data and DAC(d) from the ADP; vi) generating for the user data a new 
user data Document Authentication Code, hereinafter referred to as DAC(nd); 

vii) comparing DAC(nd) with DAC(d), and proceeding only if DAC(nd) is equal to DAC(d) 
(see column 8, lines 9-14, where "user data" is read on "selected pixel values", "new user data 
Document Authentication Code" is read on "new hash value", "DAC(d) is read on "decrypted 
hash value"). 



user"); 
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Therefore, it would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Bjorn as modified, to include v) retrieving the user data 
and DAC(d) from the ADP; vi) generating for the user data a new user data Document 
Authentication Code, hereinafter referred to as DAC(nd); vii) comparing DAC(nd) with DAC(d), 
and proceeding only if DAC(nd) is equal to DAC(d); 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Bjorn as modified, by the teaching of Squilla et al because 
by including v) retrieving the user data and DAC(d) from the ADP; vi) generating for the user 
data a new user data Document Authentication Code, hereinafter referred to as DAC(nd); vii) 
comparing DAC(nd) with DAC(d), and proceeding only if DAC(nd) is equal to DAC(d), would 
allow authentication process to authenticate and verify that the user data has not been tampered. 

6. Claims 9 and 10 are rejected under 35 U. S. C. 103 (a) as being unpatentable over Chang et al 
(U. S. Patent No. 6,105,012) in view of Beatson et al (U. S. Patent No. 5,892,824). 
As to claim 9, Chang et al teaches a method for the separate authentication of a template 

having entry fields and user data inserted into the fields (see column 10, lines 2-5, where 

"template" is read on "user registration form" and "user data" is read on "user information"), 

comprising the steps of 

a) selecting a -template ED and a corresponding template Document Authentication 
Code, hereinafter referred to as DAC(t), linked to the template (see column 9, lines 25 
27, where "DAC(t)" is read on "session key"; and see column 10, lines 37-40, where 
"template id" is read on "request = register"); 
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b) entering the user data; 

c) linking the user data to the fields of the template (see column 10, lines 27-36); 

d) generating a user data Document Authentication Code, hereinafter referred to as 
DAC(d), based on the user data; (see column 1 1, lines 59-66, where "user data" is read 
on "form data" and "DAC(d) n is read on "session key"). 

Chan et al does not teach: 

e) storing the template ID, DAC(t), the user data and DAC(d) in an Approval Data 
Packet, hereinafter referred to as ADP. 

Beatson et al teaches storing the template ID, DAC(t), the user data and DAC(d) in 
an Approval Data Packet, hereinafter referred to as ADP (see column 14, lines 18-21). 
Therefore, it would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Chang et al to include storing the template ID, DAC(t), 
the user data and DAC(d) in an Approval Data Packet, hereinafter referred to as ADP. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Chang et al by the teaching of Beatson et al because by 
including storing the template ID, DAC(t), the user data and DAC(d) in an Approval Data 
Packet, hereinafter referred to as ADP, would facilitate the retrieval of these elements for post 
processing. 



As to claim 10, Chang et al as modified teaches, wherein step b) further comprises prompting 
the user for the user data (see Cha:ng et al , column 4, lines 2-5, where "prompting" is read on 
"eliciting"). 
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7. Claim 1 1 is rejected under 35 U.S. C, 103(a) as being unpatentable over Chang et al (U. S. 
Patent No. 6, 105,012) in view of Beatson et al (U. S. Patent No. 5,892,824), as applied to 
claims 9-10 above, and further in view of Weiss et al (U.S. Patent No. 6,071,190). 

As to claim 1 1, Chang et al as modified does not teach, wherein step e) further comprises 
encrypting the ADP. 

Weiss et al teaches wherein step e) further comprises encrypting the ADP (see column 14, 
lines 1-3). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Chang et al as modified, to include the step of 
encrypting the ADP. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Chang et al as modified, by the teaching of Weiss et al 
because by including the step of encrypting the ADP, would further secure the ADP from being 
tampered. 

8. Claim 12 is rejected under 35 U.S.C. 103(a) as being unpatentable over Chang et al (U.S. 
Patent No. 6,105,012) in view of Beatson et al (U.S. Patent No. 5,892,824) as applied to 
claims 9-10 above, and further in view of Douglis et al (U.S. Patent No. U.S Patent No. 
6,021,426.) 
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As to claim 12, Chang et al as modified, does not teach further comprising an additional step 
f) of reconstructing an authenticated complete document, the complete document including the 
template and the user data. 

Doughs et al teaches an additional step f) of reconstructing an authenticated complete 
document, the complete document including the template and the user data (see column 2, lines 
36-51, where "complete document" is read on "a complete and updated resource; column 3, lines 
46-50; and column 6, lines 22-24, where "template" is read on "static portion" and "user data" is 
read on "dynamic portion"). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Chang et al as modified, to include the step of 
reconstructing an authenticated complete document, the complete document including the 
template and the user data. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Chang et al as modified, by the teaching of Doughs et al 
because by including the step of reconstructing an authenticated complete document, the 
complete document including the template and the user data, would verified that the user data is 
correctly corresponded with the template. 

9. Claim 13 is rejected under 35 U.S. C. 103(a) as being unpatentable over Chang et al (U.S. 
Patent No. 6,105,012) in view of Beatson et al (U.S. Patent No. 5,892,824) and further in 
view of Doughs et al (U.S. Patent No. US Patent No. 6,021,426), as applied to claim 12 
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above, and still further in view of Bjorn (U.S. Patent No. 6,035,398) and yet further in view 
of Squilla et al (U.S. Patent No. 5,898,779). 

As to claim 13, Chang et al as modified teaches, wherein step f) comprises the sub steps of 

i) retrieving the template ED and DAC(t) from the ADP (see Chang et al column 9, lines 
25-27, where H DAC(t)" is read on "session key"; and see column 10, lines 37-40, where 
"template id" is read on request = "register""); 

ii) opening the template corresponding to the template ID (see Change et a l, column 10, lines 
37-39); 

viii) inserting the user data in the template (see Chang et al, column 10, lines 27-32.) 
Chang et al as modified does not teach: 

iii) generating for the template a new template Document Authentication Code, hereinafter 
referred to as DAC(nt); 

iv) comparing DAC(nt) with DAC(t), and proceeding only if DAC(nt) is equal to DAC(t). 
Bjorn teaches: 

iii) generating for the template a new template Document Authentication Code, 
hereinafter referred to as DAC(nt) (see Bjorn , column 8, lines 62-65, where "new template 
Document Authentication Code" is read on "public key" and "template" is read on "fingerprint 
template"); 

iv) comparing DAC(nt) with DAC(t), and proceeding only if DAC(nt) is equal to DAC(t) 
(see Bjorn , column 9, lines 20-30, where "DAC(t)" is read on "fingerprint received from the 
user"); 
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Therefore, it would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Chang et al as modified, to include the step of iii) 
generating for the template a new template Document Authentication Code, hereinafter referred 
to as DAC(nt) and step iv) comparing DAC(nt) with DAC(t), and proceeding only if DAC(nt) is 
equal to DAC(t). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Chang et al as modified, by the teaching of Bjorn to 
include then step of iii) generating for the template a new template Document Authentication 
Code, hereinafter referred to as DAC(nt) and step iv) comparing DAC(nt) with DAC(t), and 
proceeding only if DAC(nt) is equal to DAC(t), would allow the verification of the fingerprint 
template. 

Chang et al as modified still does not teach 

v) retrieving the user data and DAC(d) from the ADP; 

vi) generating for the user data a new user data Document Authentication Code, hereinafter 
referred to as DAC(nd); 

vii) comparing DAC(nd) with DAC(d), and proceeding only if DAC(nd) is equal to DAC(d). 
Squilla et al teaches: 

v) retrieving the user data and DAC(d) from the ADP; 

vi) generating for the user data a new user data Document Authentication Code, hereinafter 
referred to as DAC(nd); 

vii) comparing DAC(nd) with DAC(d), and proceeding only if DAC(nd) is equal to DAC(d) 
(see column 8, lines 9-14, where "user data" is read on "selected pixel values", "new user data 
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Document Authentication Code" is read on "new hash value", "DAC(d) is read on "decrypted 
hash value"). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Chang et al as modified, to include v) retrieving the 
user data and DAC(d) from the ADP; vi) generating for the user data a new user data Document 
Authentication Code, hereinafter referred to as DAC(nd); vii) comparing DAC(nd) with DAC(d), 
and proceeding only if DAC(nd) is equal to DAC(d); 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Chang et al as modified, by the teaching of Squilla et al 
because by including v) retrieving the user data and DAC(d) from the ADP; vi) generating for 
the user data a new user data Document Authentication Code, hereinafter referred to as 
DAC(nd); vii) comparing DAC(nd) with DAC(d), and proceeding only if DAC(nd) is equal to 
DAC(d), would allow authentication process to authenticate and verify that the user data has not 
been tampered. 

10. Claim 21 is rejected under 35 U. S. C. 103 (a) as being unpatentable over Bjorn (U.S. Patent 
No. 6,035,398) in view of Beatson et al (U.S. Patent No. 5,892,824) and further in view of 
Douglis et al (U. S Patent No. 6,021,426), as applied to claims 7, 20, and 22 above, and 
further in view of Squilla et al (U.S. Patent (No. 5,898,779). 

As to claim 21, Bjorn as modified teaches wherein step g) comprises the substeps of 
i) retrieving the template ID, DAC(t) and DAC(c) from the ADP; 
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iii) generating for the template a new template Document Authentication Code, hereinafter 
referred to as DAC(nt) (see Bjorn, column 8, lines 62 65, where "new template Document 
Authentication Code" is read on "public key" and "template" is read on fingerprint template"); 

iv) comparing DAC(nt) with DAC(t), and proceeding only if DAC(nt) is equal to DAC(t) 
(see Bjorn , column 9, lines 20-30, where n DAC(t)" is read on "finger print received from the 
user"); 

viii) inserting the user data in the template (see Bjorn , column 4, lines 21-24); 

ix) generating for the template with the user data therein a new complete Document 
Authentication Code, hereinafter referred to as DAC(nc); and (see Bjorn , column 8, lines 62-65, 
where "new template Document Authentication Code" is read on "public key" and "template" is 
read on fingerprint template"); 

x) comparing DAC(nc) with DAC(c), and proceeding only if DAC(nc) is equal to DAC(c) 
(see Bjorn , column 9, lines 20-30, where "DAC(t)" is read on "finger print received from the 
user"); 

Bjorn as modified does not teach 

v) retrieving the user data and DAC(d) from the ADP; 

vi) generating for the user data a new user data Document Authentication Code, hereinafter 
referred to as DAC(nd); 

vii) comparing DAC(nd) with DAC(d), and proceeding only if DAC(nd) is equal to DAC(d); 
Squilla et al teaches: 

v) retrieving the user data and DAC(d) from the ADP; 

vi) generating for the user data a new user data Document Authentication 
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Code, hereinafter referred to as DAC(nd); 

vii) comparing DAC(nd) with DAC(d), and proceeding only if DAC(nd) is 
equal to DAC(d) (see column 8, lines 9-14, where "user data" is read on "selected pixel 
values", "new user data Document Authentication Code" is read on "new hash value", 
"DAC(d) is read on "decrypted hash value"). 

Therefore, it would have been obvious to a person having ordinary skill in 
the art at the time the invention was made to have modified Bjorn as modified, to include 

v) retrieving the user data and DAC(d) from the ADP; vi) generating for the user data a 
new user data Document Authentication Code, hereinafter referred to as DAC(nd); vii) 
comparing DAC(nd) with DAC(d), and proceeding only if DAC(nd) is equal to DAC(d); * 

It would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to have modified Bjorn as modified, by the teaching of 
Squilla et al because by including v) retrieving the user data and DAC(d) from the ADP; 

vi) generating for the user data a new user data Document Authentication Code, 
hereinafter referred to as DAC(nd); vii) comparing DAC(nd) with DAC(d), and 
proceeding only if DAC(nd) is equal to DAC(d), would allow the authentication process 
to authenticate and verify that the user data has not been tampered. 

Allowable Subject Matter 
11. Claims 23-25 are objected to as being dependent upon a rejected base claim, but would be 
allowable if rewritten in independent form including all of the limitations of the base claim 
and any intervening claims. 
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12. The following is a statement of reasons for the indication of allowable subject matter: 

The prior art of record, Bjorn (U.S. Patent No. 6,035,398), Beatson et al (U.S. Patent No. 
5,892,824), Weiss et al (U.S. Patent No. 6,071,190), Douglis et al (U.S. Patent No. 6,021,426), 
Squilla et al (U.S. Patent No. 5,898,779), and Chang et al (U. S. Patent No. 6,105,012), do not 
disclose, teach, or suggest the claimed limitations of (in combination with all other features in 
the claim): 

a) authenticating a template and user data from a first user according to the method of claim 
14; and 

b) for each subsequent user of multiple users, performing the substeps of: 

i) retrieving the template and DAC9(c); 

ii) inserting user data from previous users in a template; 

iii) generating for the template with the user data from previous users therein a new 
template Document Authentication Code, hereinafter referred to as DAC(nc); 

iv) comparing DAC(nc) with DAC(c), and proceeding only if DAC(nc) is equal to 
DAC(c); 

v) inserting data from the current user in the template; 

(vi) generating a DAC(c), based on the template with the user data from the previous 
users and current user therein; 

vii) extracting the user data from the previous users and current user from the template; 

viii) generating a DAC(d), based on the user data extracted in step viii); and 



* 
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ix) storing the user data, DAC(c) and DAC(d) in ADP, as claimed in claim 23. 
Claims 24-25 are objected to as being dependents from the objected to dependent claim 23. 

Conclusion 

13. Any inquiries concerning this communication or earlier communications from the examiner 
should be directed to Tony Mahmoudi whose telephone number is (703) 305-4887. The 
examiner can normally be reached on Mondays-Fridays from 08:00 am to 04:30 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Dov Popovici, can be reached at (703) 305-3830. 
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